50 matches found
MAL-2025-6923 Malicious code in dpais-chat-template-pwa (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...
CVE-2024-34359
llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...
CVE-2024-34359
CVE-2024-34359 affects llama-cpp-python (Python bindings for llama.cpp). The vulnerability arises when init loads a model’s chat template from the gguf metadata and constructs self.chat_handler via llama_chat_format.Jinja2ChatFormatter.to_chat_handler(), using a sandbox-less Jinja2 Environment. R...
PT-2024-22934
Name of the Vulnerable Software and Affected Versions BerriAI/litellm affected versions not specified Description The issue arises from the hf chat template method processing the chat template parameter from the tokenizer config.json file through the Jinja template engine without proper...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
CVE-2023-49214
Usedesk before 1.7.57 allows chat template injection...
Design/Logic Flaw
Usedesk before 1.7.57 allows chat template injection...
